[Secure-testing-commits] r4719 - data/CVE

[Stefan Fritsch]

Author: stef-guest
Date: 2006-09-11 17:40:14 +0000 (Mon, 11 Sep 2006)
New Revision: 4719

Modified:
   data/CVE/list
Log:
libgd2, imagemagick, graphicsmagick fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-09-10 21:29:36 UTC (rev 4718)
+++ data/CVE/list	2006-09-11 17:40:14 UTC (rev 4719)
@@ -308,7 +308,7 @@
 	- php5 5.1.6-1
 	- php4 <not-affected> (Vulnerable function doesn't exist)
 CVE-2006-4484 (Buffer overflow in the LWZReadByte_ function in ...)
-	- libgd2 <unfixed> (medium; bug #384838)
+	- libgd2 2.0.33-5.1 (medium; bug #384838)
 	- xloadimage <unfixed> (low; bug #384841)
 CVE-2006-4483 (The cURL extension files (1) ext/curl/interface.c and (2) ...)
 	- php5 5.1.6-1 (low)
@@ -1215,7 +1215,7 @@
 CVE-2006-4072 (Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 ...)
 	NOT-FOR-US: Club-Nuke [XP]
 CVE-2006-4144 (Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick ...)
-	- imagemagick <unfixed> (medium; bug #383314)
+	- imagemagick 7:6.2.4.5.dfsg1-0.10 (medium; bug #383314)
 	- graphicsmagick 1.1.7-7 (medium; bug #383333)
 CVE-2006-XXXX [crash in the certificate verification logic]
 	NOTE: GNUTLS-SA-2006-2
@@ -2008,10 +2008,12 @@
 	- linux-2.6.16 <unfixed>
 CVE-2006-3744 (Multiple integer overflows in ImageMagick before 6.2.9 allows ...)
 	{DSA-1168-1}
-	- imagemagick <unfixed> (bug #385062)
+	- imagemagick 7:6.2.4.5.dfsg1-0.10 (bug #385062)
+	- graphicsmagick 1.1.7-7
 CVE-2006-3743 (Multiple buffer overflows in ImageMagick before 6.2.9 allow ...)
 	{DSA-1168-1}
-	- imagemagick <unfixed> (bug #385062)
+	- imagemagick 7:6.2.4.5.dfsg1-0.10 (bug #385062)
+	- graphicsmagick 1.1.7-8
 CVE-2006-3742 (The KDE PAM configuration shipped with Fedora Core 5 causes KDM ...)
 	TODO: check
 CVE-2006-3741